Tobias Gesellchen gesellix

sharing secrets

There's no need for a big application when all you want is to securely share some files or other data. OpenSSL is ubiquitious, so we can rely on the command line tools.

The following examples encrypt/decrypt the secrets.txt file base64 encoded into a secrets.txt.enc file. The password is entered interactively. For details see the man page of openssl enc.

encrypt

Install the Docker Toolbox and Docker Compose:

Mac, Windows: https://www.docker.com/products/docker-toolbox (includes Compose)
Linux: https://docs.docker.com/engine/installation/ and https://docs.docker.com/compose/install/

Prefetch necessary images (execute in the Docker Terminal):

docker pull hello-world

Prerequisites : the letsencrypt CLI tool

This method allows your to generate and renew your Lets Encrypt certificates with 1 command. This is easily automatable to renew each 60 days, as advised.

You need nginx to answer on port 80 on all the domains you want a certificate for. Then you need to serve the challenge used by letsencrypt on /.well-known/acme-challenge. Then we invoke the letsencrypt command, telling the tool to write the challenge files in the directory we used as a root in the nginx configuration.

I redirect all HTTP requests on HTTPS, so my nginx config looks like :

server {

git clone https://gist.github.com/dd6f95398c1bdc9f1038.git vault
cd vault
docker-compose up -d
export VAULT_ADDR=http://192.168.99.100:8200

Initializing a vault:

vault init

tmux shortcuts & cheatsheet

start new:

tmux

start new with session name:

tmux new -s myname

	#!/bin/bash

	# References
	# http://www.computerhope.com/unix/nc.htm#03
	# https://github.com/daniloegea/netcat
	# http://unix.stackexchange.com/questions/26715/how-can-i-communicate-with-a-unix-domain-socket-via-the-shell-on-debian-squeeze
	# http://unix.stackexchange.com/questions/33924/write-inside-a-socket-open-by-another-process-in-linux/33982#33982
	# http://www.linuxjournal.com/content/more-using-bashs-built-devtcp-file-tcpip
	# http://www.dest-unreach.org/socat/
	# http://stuff.mit.edu/afs/sipb/machine/penguin-lust/src/socat-1.7.1.2/EXAMPLES

	###
	# Node.js app Docker file
	#
	# Some basic build instructions:
	# ```
	# # you should delete node_modules b/c you don't want that copied during 'ADD'
	# docker build -t thom-nic/node-bootstrap .
	# # run a shell in the container to inspect the environment (as root):
	# docker run --rm -itu root thom-nic/node-bootstrap /bin/bash
	# ```

	//
	// Regular Expression for URL validation
	//
	// Author: Diego Perini
	// Updated: 2010/12/05
	// License: MIT
	//
	// Copyright (c) 2010-2013 Diego Perini (http://www.iport.it)
	//
	// Permission is hereby granted, free of charge, to any person

	package main

	import (
	"encoding/base64"
	"net/http"
	"strings"
	)

	type handler func(w http.ResponseWriter, r *http.Request)